The 'no proxy' server architecture may be the just one that gives a method to exclude visitors headed to sure hosts from using the proxy. It specifies an exclusion listing of the IP addresses or hostnames that won't use a proxy. netfilter iptables (shortly to get replaced by nftables)